Research Paper
Ransomware attacks in Healthcare Institutions
Submitted By:
Menuka Thapa Magar
Summary of the Case
Ransom ware attacks are not only targeting major financial corporations but are also targeting healthcare institutions.
There are several cases where hospitals and health care centers have had to part with money to regain access to their systems
There is a need for healthcare centers to invest in better IT security measures
Ransomware is a malware form premeditated to block one from accessing his/her data in a computer system until the victim pays a ransom .
Among the many industries hit by cyber-threats and data breaches includes the healthcare industry. Once ransomware has hit a healthcare facility, most processes become inoperable while others are decelerated.
Pathological processes are slowed, and a lot of funds are soaked up. The reason health centers become vulnerable to the ransomware attack is because of the availability of many systems and devices.
Hollywood Presbyterian Medical Center was a victim of Ransom attack in February 2016 where employees within the organization were not able to access the hospital network until a $17000 was paid.
A ransomware attack was witnessed at Washington D.C and MedStar, where all emails were shut, including the EHR systems to keep the virus away from spreading. A fee was paid by New Jersey’s Hackensack Meridian Health, where the attack affected up to 17 hospitals
2
Why healthcare organizations should invest more to protect against ransomware
Ransomware attacks are costly
Ransomware attacks hinder service delivery and provision of health services
Ransomware attacks can lead to the loss of trust (Miah, 2019).
Ransomware attacks expose healthcare institutions to other related risks
There are four main reasons why healthcare organizations should invest more to protect themselves against ransomware. Top on the list ransomware attacks are costly in that, institutions have to part with their resources for them to regain access to their systems. Secondly, they hinder service delivery and provision of health services. Thirdly they lead to the loss of trust and damage reputations and consequentially affect business for healthcare institutions.
Lastly successful ransomware attacks expose healthcare institutions to other related risks such as law suits and death of patients due to downtime in equipment and systems.
3
Theory that explains Ransom ware attacks and their success
The Theory of Reasoned Action
It focuses on the prediction of human behavior based on pre-existing attitudes and behavioral intentions (Doane, Kelley & Pearson, 2016).
Hackers know that people like opening all attachments sent to them via mail and therefore initiate ransomware attacks through pop ups and attachments
The theory that best explains the reason why ransomware happen as well as how to counter ransomware is The Theory of Reasoned Action.
The theory focuses on the prediction of human behavior based on pre-existing attitudes and behavioral intentions.
Hackers know that people like opening all attachments sent to them via mail and therefore initiate ransomware attacks through pop ups and attachments
4
Countering ransomware attacks
Three main ways of countering ransomware attacks
Educating all health care personnel on email phishing (Henry & Brantly, 2018).
Installation of effective antiviruses
Continuous monitoring of all systems and networks
There are three main ways in which ransomware attacks can be countered;
Educating all health care personnel on email phishing
Installation of effective antiviruses
Continuous monitoring of all systems and networks
5
Conclusion
Ransomware attacks are targeted at individuals and organizations that impact a large group of people or that deal with a lot of resources.
It is necessary that all organizations take it upon themselves to protect themselves against ransomware.
Information and knowledge gained from the research will be used to come up with better ways to secure health institutions.
Ransomware attacks are targeted at individuals and organizations that impact a large group of people or that deal with a lot of resources.
It is necessary that all organizations take it upon themselves to protect themselves against ransomware.
Information and knowledge gained from the research will be used to come up with better ways to secure health institutions.
6
References
Doane, A. N., Kelley, M. L., & Pearson, M. R. (2016). Reducing cyberbullying: A theory of reasoned action‐based video prevention program for college students. Aggressive behavior, 42(2), 136-146. Retrieved from https://onlinelibrary.wiley.com/doi/abs/10.1002/ab.21610
Henry, S., & Brantly, A. F. (2018). Countering the cyber threat. The Cyber Defense Review, 3(1), 47-56. Retrieved from https://www.jstor.org/stable/26427375?seq=1#metadata_info_tab_contents
Miah, M. N. (2019). Ransomware Attacks: Challenges and Defence. Retrieved from https://hal.archives-ouvertes.fr/hal-02558819/